nanog mailing list archives

Re: quietly....


From: Owen DeLong <owen () delong com>
Date: Wed, 2 Feb 2011 07:04:13 -0800


On Feb 2, 2011, at 6:43 AM, Jack Bates wrote:



On 2/2/2011 8:22 AM, Tony Finch wrote:
Counterexample: rogue RAs from Windows boxes running 6to4 or Teredo and
Internet Connection Sharing. This is a lot harder to fix than a
misconfigured DHCP server.

CounterCounterexample: rogue DHCPv6 servers from windows boxes or improperly connected CPEs.

Both DHCP(4 or 6) and RA require careful filtering to keep rogues from jacking things up. Though M$ has a nice 
deployment for authorizing DHCP4 servers in corporate environments.

It's a lot easier to find and eliminate a rogue DHCP server than a rogue RA.

Owen



Current thread: